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Quantum repeaters promise to enable quantum networks over global distances by circumventing the exponen¬ 
tial decrease in success probability inherent in direct photon transmission. We propose a realistic, functionally 
integrated quantum-repeater implementation based on single atoms in optical cavities. Entanglement is directly 
generated between the single-atom quantum memory and a photon at telecom wavelength. The latter is collected 
with high efficiency and adjustable temporal and spectral properties into a spatially well-defined cavity mode. 
It is heralded by a near-infrared photon emitted from a second, orthogonal cavity. Entanglement between two 
remote quantum memories can be generated via an optical Bell-state measurement, while we propose entan¬ 
glement swapping based on a highly efficient, cavity-assisted atom-atom gate. Our quantum-repeater scheme 
eliminates any requirement for wavelength conversion such that only a single system is needed at each node. We 
investigate a particular implementation with rubidium and realistic parameters for Fabry-Perot cavities based 
on CO2 laser-machined optical fibers. We show that the scheme enables the implementation of a rather simple 
quantum repeater that outperforms direct entanglement generation over large distances and does not require any 
improvements in technology beyond the state of the art. 


I. INTRODUCTION 

Heralded entanglement between particles separated by 
large distances is a valuable resource in quantum commu¬ 
nication. The applications range from fundamental tests of 
quantum physics like loophole-free Bell tests [1, 2] to device¬ 
independent quantum key distribution [3, 4]. The distribu¬ 
tion of entanglement via the direct transmission of photons 
via fiber optics is practically impossible for large distances, 
because the inevitable losses in optical fibers cause an expo¬ 
nential decrease of the success rate with distance. This can be 
overcome by dividing the distance into smaller segments with 
quantum repeater nodes in between [5]. 

The performance of quantum repeaters can be characterized 
by the rate at which pairs of quantum memories separated by 
a given distance can be entangled with high fidelity. The ob¬ 
vious benchmark for a quantum repeater to beat is the rate 
achievable via direct transmission. The critical parameter in 
the latter case is the attenuation length of the optical fiber, 
which is maximal at telecom wavelengths around 1.3 pm and 
1.5 pm, where the absorption in optical fibers is low [6, 7]. In 
order to keep the technological overhead minimal, it is there¬ 
fore essential to operate a quantum repeater at a telecom wave¬ 
length. Additional requirements for an efficient quantum re¬ 
peater are quantum memories with coherence times by far ex¬ 
ceeding the average time required for the protocol to succeed 
and high-efficiency and high-fidelity implementations of all 
subparts of the protocol. These include entanglement genera¬ 
tion and entanglement distribution via photons as well as en¬ 
tanglement swapping using single-qubit operations, two-qubit 
operations, and state readout. Against this backdrop, various 
systems have been proposed for the implementation of a quan¬ 
tum repeater, e.g., atomic ensembles [8], single neutral atoms 
and ions [9], nitrogen vacancy centers [10], quantum dots [9], 
and ion-doped solids [11]. 

Single atoms in optical cavities are especially promising 
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[12], because they can be isolated from the environment to 
provide long coherence times [13] and have been shown to 
be an efficient light-matter interface [14]. Several subparts 
of a quantum-repeater protocol have been successfully imple¬ 
mented with these systems at near-infrared wavelengths, e.g., 
the generation of atom-photon entanglement [15], an atom- 
photon quantum gate [16], and the heralded storage of a pho¬ 
tonic quantum bit [17]. Demonstrations of a quantum repeater 
that go beyond proof of concept will have to find a way to 
combine these operations with telecom-wavelength photons. 
This has recently sparked very active research in external de¬ 
vices that convert photonic qubits at wavelengths in the near- 
infrared to telecom wavelengths [18, 19]. An alternative route 
being pursued is the generation of an entangled photon pair 
via spontaneous parametric down-conversion, with one pho¬ 
ton at telecom wavelength and the other in the near-infrared, 
followed by storage of the near-infrared photon in a quantum 
memory [20, 21]. While these strategies seem straightfor¬ 
ward, they come at the price of a large technological overhead 
and reduced efficiency. 

Here, we therefore propose to perform the required oper¬ 
ations directly at telecom wavelengths, thereby avoiding any 
issues that arise from combining the different technologies. 
We describe a realistic scheme for a simple quantum repeater 
that can be implemented using current technology and show 
that it is capable of outperforming schemes based on direct 
transmission. The basic unit is illustrated in Fig. 1. Heralded 
entanglement between a single atom in a crossed-cavity setup 
and a photon at telecom wavelength is created. The telecom 
photons from two remote atoms are sent to a photonic Bell- 
state analyzer to create heralded remote entanglement. Once 
the two atoms at the central node are each entangled with a dif¬ 
ferent remote node, an atomic Bell-state measurement (BSM) 
is performed for entanglement swapping. The scheme can 
be implemented with current technology and provides a clear 
path to an experimental demonstration of a quantum repeater. 

In the following, we describe the implementation of the in¬ 
dividual parts of the scheme. In Sec. II we propose a way 
to directly generate entanglement between single atoms and 
a telecom-wavelength photon using a cascaded scheme. We 
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FIG. 1. Basic quantum repeater scheme featuring single atoms in optical cavities and telecom photons. A single repeater node consists of 
a heralding cavity (blue, horizontal cavity mode axis) and two telecom-wavelength entangling cavities (red, vertical mode axis). The atoms 
(black dots) are individually controlled by laser beams perpendicular to the image plane (indicated by green circles around the atoms). Two 
nodes separated by distance L/2 are entangled by first creating atom-photon entanglement locally at each of the nodes and then performing an 
optical Bell-state measurement (BSM) at a distance L/4 from each node. Entanglement swapping between pairs of nodes is implemented at the 
central node. A cavity-assisted quantum gate is performed on the two atoms via reflection of a single photon originating from a cavity-based 
single-photon source (SPS). Subsequent detection of the atomic quantum states in suitable bases allows for an unambiguous determination of 
the two-particle Bell state. This results in an entangled state between the two outermost nodes separated by a distance L. This basic unit can 
be extended to a larger number of swap levels by appending further quantum repeater nodes at the ends of the quantum repeater link (cf. the 
additional entangling cavities in gray). 


will estimate the performance of a particular implementation 
using 87 Rb and realistic cavity parameters. In Sec. Ill we in¬ 
vestigate the indistinguishability of the telecom photons cre¬ 
ated in this way and show that they are well suited for a pho¬ 
tonic BSM that entangles the two remote single-atom quan¬ 
tum memories. Entanglement swapping by atomic BSM will 
be the topic of Sec. IV. In Sec. V we analyze the performance 
of the full repeater scheme and show that it can outperform 
entanglement generation based on direct transmission. We 
furthermore discuss the prospects of integrating entanglement 
purification in our scheme. While all required components 
can be implemented in our cavity-based approach, we show 
that under the assumption of realistic fidelities, entanglement 
purification is of little use for a quantum repeater over moder¬ 
ate distances with a small number of swap levels. 


II. HERALDED ATOM-PHOTON ENTANGLEMENT AT 
TELECOM WAVELENGTH 

Direct coupling of an atom to single photons requires an 
atomic transition at the desired wavelength. Unfortunately, 
the atomic species that can be easily laser-cooled show no 
suitable transitions from the ground states at telecom wave¬ 
lengths. However, there are suitable transitions from excited 
states, which have already been used for wavelength conver¬ 


sion [18] and entanglement generation using cascade transi¬ 
tions [22] in atomic ensembles. Here, we present a related 
cascaded scheme that uses these transitions to generate en¬ 
tanglement between an atom and a telecom-wavelength pho¬ 
ton without wavelength conversion. We propose to use a sin¬ 
gle atom trapped at the intersection of two high-finesse cavi¬ 
ties (see Fig. 2a) such that it is coupled to two different, spa¬ 
tially and spectrally well-defined modes. This enables effi¬ 
cient emission of single photons at telecom wavelength entan¬ 
gled with the atom via one of the cavities and herald photons 
at near-infrared wavelength via the other. The herald photons 
signal the successful creation of entanglement. 


A. Cascaded entanglement scheme 

We assume an atom with a level scheme compatible with 
the one depicted in Fig. 2b, which resembles the levels of 
bosonic alkali atoms. Essential for the protocol are two de¬ 
generate, long-lived states |=bl)y, which are Zeeman sublevels 
with mp = ±1 and will be used to store the atomic qubit. 
These states are each coupled via a ^-transition at wavelength 
Ah to one of the two short-lived, intermediate states |±1)-, 
which also feature mp = ±1. The excited state \e), with 
mp = 0, can decay to |=bl)- at wavelength At. The atom is 
initialized in a third ground state | g) with mp = 0, and can 
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FIG. 2. a Experimental setup for creating entanglement between a single atom and a telecom-wavelength photon. A single atom is placed 
at the intersection of the modes of a heralding cavity at Ah and an entangling cavity at At. The cavities are single-sided, such that intracavity 
photons leave through the respective output-coupling mirror (lighter color) with high probability. The atom is driven on a two-photon transition 
via control beams impinging perpendicular to the image plane, b Atomic energy level scheme. The required states are labeled and drawn in 
black. Unwanted decay paths at Ah are indicated by the gray dashed arrows. The relative transition amplitudes are indicated by the letters aW 
- cW. c A particular implementation with 87 Rb. Zeeman states of hyperfine levels not relevant for the scheme have been omitted for clarity. 
The level spacings are not to scale. 


be coupled to \e) via a two-photon transition far detuned from 
an intermediate state \k), which may be identical to \i). The 
atom is placed at the intersection of two perpendicular cav¬ 
ity modes. The cavities are named heralding and entangling 
cavity and are resonant at Ah and At, respectively. To describe 
the system, we choose the quantization axis to coincide with 
the axis of the entangling cavity. This way, the entangling cav¬ 
ity supports G~- and cj + - polarization and the heralding cavity 
supports linear polarization modes, one of which needs to be 
aligned with ^-polarization. 

To create atom-photon entanglement, the atom is first ini¬ 
tialized in state | g) by optical pumping and then coupled to the 
state \e) by a two-photon control pulse. Due to the presence 
of the resonant entangling cavity, this state couples cavity- 
enhanced to the states | — 1)- and | + 1). and emits a photon in 
a superposition of the polarization states |(7 + ) r and \ <J~) t into 
the entangling cavity. This controlled photon production is 
similar to entanglement generation schemes at near-infrared 
wavelengths [15]. By varying the shape of the control pulse, 
the envelope of the generated photon can be controlled. If the 
process succeeds, the atomic state and the polarization of the 
photon leaving the entangling cavity are entangled: 

\'V l ) = ^(\-l) i \cj + ) t + e ld \+l) i \e-) t )- CD 

The relative phase 0 can take the values 0 and n and depends 
on the relative sign of the transition dipole matrix elements 
and thus on the particular transition chosen. 

|'Pi) is already an entangled state between the atom and 
a photon at the wavelength A t , but it is short lived, because 
the states |±1). quickly decay. If the decay leads to emission 
of a ^-polarized photon, the entangled atom-photon state is 


transferred to the long-lived, final state 

\*2) = ^(\-l) f \<y + ) t + e 1§ \+l) f \e-) t )- (2) 

Again, the relative phase 0 can take values of 0 and 7T. Detec¬ 
tion of a ^-polarized photon at Ah thus heralds the successful 
creation of the desired entangled state. To achieve the high 
success probabilities required for quantum repeaters, this de¬ 
cay path should dominate and the herald photons need to be 
efficiently collected. Both requirements are accomplished by 
the heralding cavity. 

The proposed scheme is suitable for all bosonic isotopes 
of alkali atoms. Implementations with rubidium, cesium and 
francium are particularly interesting, because these elements 
have suitable transitions at wavelengths in telecom bands. 

B. Implementation with 87 Rb 

To evaluate the performance of the proposed scheme 
with current technology, we investigate a particular imple¬ 
mentation with 87 Rb (Fig. 2c) more closely. We choose 
the hyperfine states \F = \\mp = 0), \F = 2\mp = — 1) and 
\F = 2\mp = +1) of the 5 2 Si/ 2 state as | g), | —l)y, and 
|+1 )f, respectively. As intermediate states |±1)• the 
\F' = \\rnp = ±1) substates of the 5 2 A/2 manifold are used 
and the 4 2 D 3 / 2 \F" = \\mp = 0) state serves as the excited 
state \e) . The 5 2 P 3/ 2 state can be employed as the intermediate 
state \k) for the two-photon control. This requires a heralding 
cavity resonant at Ah = 795 nm and will generate entangled 
photons at At = 1476 nm, which is in the S-band of optical 
fiber communication. 
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FIG. 3. Expectation value of the entangling-cavity output (blue solid 
line) and the heralding-cavity output (green dashed line) for the pa¬ 
rameters given in the main text and a Gaussian control pulse (red 
dotted line) with a full width at half maximum (FWHM) of 5.9 ns. 
Because the control pulse is short, the bandwidth of the photons is 
limited by the coupling strengths and the bandwidths of the cavities. 
Correlations of spectral and temporal properties between herald and 
telecom photons are therefore suppressed. At times beyond the 45 ns 
plotted here, there is a small revival of the heralding cavity output, 
which, however, contains less than 3 % of the total output. 


The proposed scheme requires two cavities with small 
mode volumes and intersecting modes. We propose to use 
a Fabry-Perot cavity based on CO 2 laser-machined optical 
fibers [23] as the entangling cavity, because this type of cav¬ 
ity combines low mode volumes, high finesse and excellent 
optical access due to small external dimensions. Using tele¬ 
com fibers as substrates also provides direct fiber integration, 
which facilitates long-distance communication. Fiber cavities 
can support degenerate polarization eigenmodes [24]. This 
is assumed for the entangling cavity, such that the atomic 
state gets entangled with the polarization of the emitted tele¬ 
com photon, but not with its frequency. Starting from re¬ 
alistic cavity parameters (see Appendix A for details), we 
calculate an atom-light coupling rate of g t = 27T x 70 MHz, 
a cavity field decay rate through the outcoupling mirror of 
K* t ° c = 271 x 95 MHz, and an additional cavity decay caused 
by other losses of K l t =2^x8 MHz for the entangling cavity. 
Photons leaving this cavity through the output coupler couple 
to the mode of a standard single-mode telecom fiber with an 
efficiency of 0.96. 

For the heralding cavity, fiber integration is not necessary, 
and we therefore propose to use CO 2 laser-machined glass 
plates as mirror substrates [25]. Degeneracy of its polarization 
eigenmodes is undesirable, because the mode with polariza¬ 
tion orthogonal to n can enhance wrong decay paths (shown 
as dashed arrows in Fig. 2). This is detectable, because it does 
not result in a 7T-polarized herald photon. Consequently, the 
failed entangling attempt is discarded, thereby reducing the 
efficiency. To avoid this problem, we suggest to employ a 
heralding cavity with a large frequency splitting of the po¬ 


larization eigenmodes [26], such that the mode orthogonal to 
7T-polarization is far detuned from the atomic transition. We 
assume the heralding cavity parameters to be {gh? k£ c , = 
2 k x {16.3,11.9,1.5}MHz. The total cavity decay rates are 
given by K t = /c t 0C + k\ and K*h = k£ c + The cooperativity of 
the atom-cavity system is C t(h) = g t 2 (h) / (jq (h) r t(h) ) = 25 (3.4) 
for the entangling (heralding) atom-cavity system. Here, 
T t = 2n x 1.92MHz (Th = 271 x 5.75MHz) is the decay rate 
of the 4 2 D 3 / 2 (5 2 P 1 / 2 ) state of 87 Rb. 

We perform numerical simulations on this system using two 
methods. The first one is integration of the corresponding 
Lindblad master equation, from which we extract the inde¬ 
pendent expectation values for the heralding- and entangling- 
cavity output. In the situation depicted in Fig. 3, the control 
pulse is long enough to result in a near-Gaussian shape of the 
telecom photons, but short enough that the bandwidth of the 
telecom and herald photons is limited by the respective cou¬ 
pling and cavity decay rates. Because the timescale for the 
decay of the heralding cavity is different from that of the en¬ 
tangling cavity, the arrival time of the herald photons is de¬ 
termined by the properties of the heralding cavity and only 
weakly correlated with the arrival time of the telecom photon. 
This enables the emission of near-indistinguishable telecom 
photons (inset of Fig. 4). 

The second method is a Monte Carlo wave-function ap¬ 
proach [27-29], which yields information about correlations 
between the cavity outputs. From the latter, we calculate the 
overall success probability p^ t , i.e., the probability to obtain a 
telecom photon in the optical fiber and a herald photon leav¬ 
ing the heralding cavity through the output coupler. For the 
parameters chosen here, we find = 0.57, basically inde¬ 
pendent of the length of the control pulse (see Fig. 4). The 
exception are very short control pulses, for which we calcu¬ 
late lower success probabilities, because the control pulse gets 
spectrally broad enough to excite the 4 2 D 3 / 2 \F" = 3; mp = 0) 
state. The main loss channels are spontaneous decay of the 
5 2 F > i/2 state (probability 0.24) and parasitic losses in the en¬ 
tangling and heralding cavity (probability 0.08 and 0.07, re¬ 
spectively). By increasing the coupling between atom and 
heralding cavity and decreasing the parasitic losses in both 
cavities, these loss channels could be minimized. Thus, with 
improvements in technology, the scheme could be performed 
almost deterministically. 


C. Fidelity 

At the start of the protocol the atom needs to be initialized 
in \g). This can be achieved by optical pumping, which is sus¬ 
ceptible to experimental imperfections. Because there is no 
fundamental limit and various strategies are possible, we as¬ 
sume that the atom is initialized in | g) with unit efficiency 
and the control pulse addresses the state \e) without excit¬ 
ing any other state. Under these conditions, the fidelity of 
the intermediate atom-photon state with the ideal state |¥i) 
is determined solely by the geometry of the system and we 
assume any photon leaving the entangling cavity to be in the 
correct entangled state. This is a very good approximation if 
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FIG. 4. Overall success probability (blue dots and solid line, left 
axis) and estimated contrast (green crosses and dashed line, right 
axis, see Sec. Ill A) for Gaussian control pulses of different widths. 
The amplitude of the control pulses has been set to the minimum 
value that leaves less than 1 % population in the initial state. Dots 
and crosses are the results of the numerical simulations, which have 
been connected by lines to guide the eye. The inset shows the ex¬ 
pectation value of the entangling-cavity output as a function of time, 
conditioned on a photon leaving the heralding cavity after 15 ns (i.e., 
early, blue dashed line), 22 ns (green solid line) and 35 ns (i.e., late, 
red dotted line) for a control pulse with a FWHM of 5.9 ns (as in 
Fig. 3). There is a weak correlation between the arrival time of the 
herald photon and the telecom-photon envelopes, leading to a slightly 
reduced contrast. 


The two atomic states correlated with a horizontally or verti¬ 
cally polarized photon, respectively, are coupled differently to 
the nif = 0 sublevel of the final state | /) by the second mode 
of the heralding cavity. The transition amplitudes from one 
of the two superpositions (| —l)-d= | + l) f )/- y/2 will interfere 
destructively, while the other interferes constructively. If the 
second mode of the heralding cavity with a polarization or¬ 
thogonal to ^-polarization is resonant as is the case for a cav¬ 
ity with degenerate polarization eigenmodes, these superposi¬ 
tions have different probabilities to emit a 7T-polarized photon, 
because one of these cannot decay to the state with mp = 0 via 
the herald cavity, while the other one can. Therefore, the fi¬ 
nal state, postselected on a correctly polarized herald photon, 
is not exactly l^), but has unequal amplitudes and is conse¬ 
quently not a maximally entangled state. To prevent that and 
thereby maximize the fidelity, the atom should not couple to 
the second mode. 

In the implementation with 87 Rb (Sec. IIB), the effect is 
small, because the unwanted mode of the heralding cavity 
couples only weakly to the state with mp = 0 compared to 
the coupling to the states with mp / 0. This is due to the 
specific branching ratios of the states involved. Even if the or¬ 
thogonal polarization mode is degenerate with the 7T-polarized 
heralding mode, the reduction in fidelity is only 0.15 % (see 
Appendix B). The effect is minimized if there is a large fre¬ 
quency splitting between the polarization eigenmodes, as also 
required to maximize the efficiency. 


2. Free-space decay 


the 5 2 P l/2 state of 87 Rb is used as the intermediate state, be¬ 
cause undesired processes are far off-resonant. The transition 
from the intermediate to the final state is unambiguously her¬ 
alded by a photon with the correct polarization at wavelength 
Ah. Therefore, conditioned on the detection of a herald pho¬ 
ton, high-fidelity entanglement generation should be possible. 
In the following, we study two potentially detrimental effects 
and demonstrate that their influence on the fidelity of the en¬ 
tangled state is marginal for the particular implementation and 
parameters chosen here. 


1. Second polarization mode of the heralding cavity 


Degenerate polarization eigenmodes of the heralding cavity 
reduce the efficiency of the protocol. Besides this obvious 
effect, the unwanted resonant mode of the herald cavity also 
has a subtle but detrimental impact on the fidelity, because 
it leads to a state-dependent probability for herald generation 
(cf. Appendix B). 

To see this, we rewrite I'Fi) in a linear polarization basis 
for the telecom photon: 


m = 



(3) 


If the atom decays via free-space emission, a state different 
from the desired one might be created. If no herald photon 
is emitted, the resulting state can be discarded. This results 
in a reduced efficiency but leaves the process fidelity unaf¬ 
fected. But, if the intermediate states |±1) • can decay back to 
the initial state | g) or any other state that can be excited by the 
control, there is a chance for multi-photon events. Reexcita¬ 
tion of \e) can result in a second telecom photon, which leaves 
the system in an undesired entangled state, but can still result 
in the generation of a herald. There are two ways to minimize 
the generation of multiple telecom photons. The first one is to 
choose the intermediate states in such a way that spontaneous 
decay preferably puts the atom in states that are not excited 
by the control laser. The second one is to execute the scheme 
quickly on the time scale of atomic decay. In the limit of 
fast excitation [30], for example with a picosecond laser, the 
detrimental effect would be eliminated. However, this would 
remove the ability to influence the shape of the photonic wave 
packet with the control lasers and a broadband pulse might ex¬ 
cite other states, which do not couple to the entangling cavity 
and thus reduce the efficiency. 

We employ the Monte Carlo wave-function approach to cal¬ 
culate an upper bound for multi-photon events for the param¬ 
eters of Sec. IIB and a short Gaussian control pulse of 5.9 ns 
FWHM. We assume the worst case, namely that all decays to 
states outside the simulated system will result in a decay to 
the initial state, from which the atom can be efficiently ex- 











6 


cited again by the control laser. We compare the number of 
calculated quantum trajectories which result in multiple pho¬ 
tons being generated to the number of desired trajectories and 
find that less than 0.4 % of the herald photons are accompa¬ 
nied by more than one telecom photon. More realistically, the 
atom will also decay to other states, which might not be ex¬ 
cited as efficiently as the initial state, such that the number of 
multi-photon events should be lower than this upper bound. 


III. REMOTE ENTANGLEMENT OF TWO SYSTEMS 

The creation of remote entanglement between two of the 
quantum-repeater nodes described in the previous section can 
be achieved by an optical Bell-state measurement (BSM) 
[31, 32] on the polarization of the two telecom-wavelength 
photons that are entangled with the atom at their respective 
repeater node. The BSM is based on two-photon interfer¬ 
ence and therefore requires the telecom photons to be indis¬ 
tinguishable in their temporal, spectral, and spatial properties, 
despite their remote origins. Single atoms in optical cavities 
can be controlled to exactly defined conditions, enabling in¬ 
distinguishable photon-generation processes at remote loca¬ 
tions [33]. However, possible temporal correlations of the 
telecom photon with the herald photon have to be considered. 
Emission via a two-photon cascade in free space shows a clear 
order of the photons. Emission of a first photon from the up¬ 
per part of the cascade is followed by an exponential decay 
of the photon belonging to the lower part. Conditioned on 
the arrival time of the second photon, the first photon will 
have an exponentially rising envelope, with a sharp drop to 
zero at the detection time of the second photon [34] . Telecom 
photons corresponding to herald photons detected at different 
times will thus have different arrival-time distributions, which 
renders the photons distinguishable. Postselecting on events 
where the herald photons were detected with the same delay 
relative to the control pulse would reestablish indistinguisha- 
bility, but also severely limit the efficiency. 

The cavity for the herald photon offers a way out: If 
the lifetime of the heralding cavity is very long compared 
to the wave-packet envelope of the generated telecom pho¬ 
ton, the former will determine the wave packet and therefore 
the detection-time distribution of the herald photon. Conse¬ 
quently, the correlations between the detection time of the her¬ 
ald photon and the wave-packet shape of the telecom photon 
will be erased by the heralding cavity, thereby restoring indis- 
tinguishability between telecom photons of different origin. 
The ideal implementation requires an entangling cavity with 
large coupling between atom and telecom photon and large 
cavity decay rate. The heralding cavity should have a smaller 
decay rate, and a smaller coupling between atom and herald 
photon can be tolerated. 


A. Numerical calculation of the photon indistinguishability 

In order to quantify the indistinguishability of the telecom 
photons, we use the Monte Carlo wave-function approach to 


generate arrival time pairs of telecom and herald photons. 
These pairs are used as input to a kernel density estimator in 
order to estimate the probability distribution of telecom pho¬ 
tons conditioned on a photon leaving the heralding cavity at a 
specific time. As the kernel, we use a two-dimensional Gaus¬ 
sian function with the bandwidth along the two axes set to 6fC t 
and 6/Ch, respectively. This bandwidth should be larger than 
the bandwidths of the processes occurring in the cavities, so 
the resulting probability distribution is likely under smoothed. 
The resulting telecom-photon probability, conditioned on the 
detection time of the herald photon, is shown in the inset of 
Fig. 4 for the same parameters used in the simulation depicted 
in Fig. 3. Under the assumption that the processes at remote 
locations are identical in all other aspects, we calculate the 
interference contrasts expected in a Hong-Ou-Mandel experi¬ 
ment [33, 35] for the telecom photons conditioned on photons 
leaving the heralding cavity at different times. Weighting the 
resulting contrasts with the probability distribution for the her¬ 
ald photons yields the average contrast C, which is 0.97 in this 
case. This two-photon interference contrast can be converted 
into a remote-entanglement fidelity F = ^(1 +C) under the 
assumption that all other processes are perfect [36]. Thus, a 
fidelity of close to 0.99 should be achievable with our model 
parameters. 

We repeat the calculation for Gaussian control pulses of dif¬ 
ferent width (Fig. 4). For long control pulses, the emission 
time of the herald photon is correlated with the emission time 
of the telecom photon, which reduces the indistinguishability 
and thus the interference contrast of the telecom photons. For 
very short control pulses, there is little correlation and the in¬ 
terference contrast is therefore high; the success probability, 
however, is not maximal. Both the success probability and the 
interference contrast are near their respective maximum for 
control pulses with a FWHM between 5 ns and 10 ns. This is 
therefore an ideal point of operation, with minimal sacrifices 
in the tradeoff between efficiency and fidelity. Because of the 
use of undersmoothed probability distributions, the values for 
the contrast are limited by the variance of the Monte Carlo 
method and therefore present a lower limit to the theoretically 
achievable contrast. 

The width of the envelope of telecom and herald photons 
is well above the timing resolution of commercially available 
single-photon counters. It is therefore possible to postselect 
events using the arrival times of telecom and herald photons. 
This enhances the interference contrast and thereby the entan¬ 
glement fidelity, however at the cost of a reduced total success 
probability. In the limit of identical detection time of the her¬ 
ald photons and in the absence of any other effect that makes 
the telecom photons distinguishable, an interference contrast 
of unity is reached. 


IV. ENTANGLEMENT SWAPPING 

To connect separate repeater links, entanglement swapping 
has to be performed. This requires a BSM on two quantum 
memories, each of which is entangled with a remote node. 
The small size of the fiber-based entangling cavities enables 
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the placement of two of them in one and the same heralding 
cavity (Fig. 1). The heralding cavity can then be used for the 
collection of herald photons from both entangling cavities. To 
this end, the creation of atom-photon entanglement has to be 
alternated between the two atoms, which is possible by ad¬ 
dressing the atoms with individual control beams and selec¬ 
tive detuning, e.g., via a local light shift. The remote entan¬ 
glement procedure described in the previous section can thus 
be repeated individually for each atom until it has succeeded 
for both. 

A quantum repeater requires quantum memories with long 
coherence times. The coherence between the Zeeman states 
| —1 )f and | + 1 ) f is limited by fluctuations of the effective 
magnetic field [37]. States with spin-orbit angular momentum 
J — 1/2, different hyperfine quantum number and the same 
magnitude but opposite sign of the magnetic quantum number 
feature a reduced differential Zeeman shift. Consequently, co¬ 
herent superpositions of these states have a strongly reduced 
sensitivity to magnetic field fluctuations [38]. We therefore 
propose to use a microwave pulse to state-selectively trans¬ 
fer one of the Zeeman states (e.g., | — 1)/) to the other hyper¬ 
fine ground state with the same mf with high fidelity. The 
corresponding final qubit states of 87 Rb are | F = 1 \mp = —1) 
and \F = 2\mp = +1). At a moderate magnetic field of about 
3.23 G, the two atomic states experience the same first-order 
Zeeman shift and a coherence time of several seconds has 
been observed [13, 39]. 

As the heralding cavity can couple to both atoms, it is a 
natural choice for the implementation of an interaction mech¬ 
anism for entanglement swapping [4CM2] . We propose to use 
a quantum gate between the two atoms based on the reflection 
of a resonant single photon from the cavity [16, 41]. As only 
one of the two hyperfine ground states couples to the herald¬ 
ing cavity, this results in a state-dependent phase shift of n on 
the two-atom state, equivalent to a controlled-Z quantum gate 
[43]. 

To perform entanglement swapping, we start with a 
Hadamard single-qubit rotation on one of the atoms, then 
apply the controlled-Z gate and subsequently a Hadamard 
gate on each of the two atoms. This maps the four atomic 
Bell states unambiguously onto four separable atomic states. 
These can be detected with unity efficiency and high fi¬ 
delity by performing cavity-assisted hyperfine state detection 
[44, 45] on each of the atoms. This entanglement swapping 
projects the remote nodes into one of the four Bell states. The 
measurement result identifies the created Bell state. There¬ 
fore, conditional single-qubit operations at the remote nodes 
might then be used to rotate the entangled state into a specific 
target state. Although realistic implementations of reflection- 
based gates have a failure probability, the success of the gate is 
heralded by the detection of the reflected photon. The method 
requires a single-sided cavity and equal reflectivities of the 
empty cavity and the coupled atom-cavity system. These 
requirements are compatible with the design criteria of the 
heralding cavity posed by the entanglement scheme presented 
in Sec. II. 



FIG. 5. Semilogarithmic plot of the expected average rate of her¬ 
alded entangled pairs between two end points separated by the total 
distance L with one elementary link (i.e., no repeater, blue dotted 
line), two links (green solid line), four links with restart from be¬ 
ginning (red dashed line) and four links keeping already entangled 
pairs (brown dash-dotted line). Because of the lower overhead, the 
scenario with no repeater node yields the highest rates at short dis¬ 
tances, but scales worse with L. For L > 100 km the quantum repeater 
protocols are clearly superior. See the main text for the parameters 
used in the calculations. 

V. QUANTUM-REPEATER PERFORMANCE 

The techniques described in the previous sections can be 
used to implement a quantum repeater protocol with entangle¬ 
ment generation, entanglement distribution and entanglement 
swapping. To assess the performance of such a repeater, we 
consider two atoms trapped in remote cavities separated by the 
total distance L, which are to be entangled. We calculate the 
rate at which heralded entangled pairs are produced at these 
end points with the help of repeater nodes separated by the dis¬ 
tance Lo and compare it to the rate achievable without repeater 
nodes. If all processes succeed with high fidelity, fidelity dif¬ 
ferences between the protocols are marginal and the entangled 
pair rates can be compared directly. In the case of experimen¬ 
tal imperfections, the reduced fidelity has to be compensated 
by a higher entangled-pair rate, e.g., to generate a secret key 
of the same length (see Sec. V C). 

A. Entangled-pair rate 

The probability to successfully generate remote entangle¬ 
ment in a single attempt between two adjacent nodes separated 
by distance Lo is 

Pe(Lo) = f (/>htJ7hT?t) 2 exp(-Lo/L a ), ( 4 ) 

where p^ t is the success probability of the entanglement gen¬ 
eration, r/h and T] t are the detector efficiencies at herald and 
telecom wavelength, respectively, and L a is the attenuation 
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length of the fiber. The factor 1/2 results from the fact that 
with a photonic BSM, only two of the four Bell states can un¬ 
ambiguously be identified. The average number of attempts 
required for N parallel processes with individual success prob¬ 
ability p to have each succeeded once is [46] 


Mp) = 


N 


I 

j =i 


N\ (-l )^ 1 
j) 1 — (1 ~p) j 


(5) 


It thus on average takes Z^(p e (Lo)) attempts to generate N en- 
tangled pairs. The atomic BSM is not completely determinis¬ 
tic, but succeeds with probability p es = Rp v r\h, where R is the 
reflectivity of the herald cavity and p v is the efficiency of the 
single photon source that generates the photon to be reflected. 
Therefore, we consider two different strategies for entangle¬ 
ment swapping. The first one is to swap all entangled pairs 
at once and restart the whole protocol when one entanglement 
swapping attempt fails (with probability 1 — /? es ). In that case, 
the average number of attempts (n(N)) until the protocol has 
succeeded over the distance L = NLo is 

( 6 ) 

Pes 

The second strategy is to swap entangled pairs as soon as 
possible. Upon failure, all entangled pairs that were not part 
of the failed entanglement-swapping attempt are kept and en¬ 
tanglement between the others is reestablished. Obviously, for 
N > 2 this results in a higher rate of entangled pairs, but the 
memories also need to store the entangled states for a longer 
time, leading to increased decoherence. To calculate (n(N)) 
for this strategy, we perform a Monte Carlo simulation with 
10 6 runs per calculated point. 

The total time (T) that is on average required to entangle 
the endpoints can be immediately calculated: 

(r) = (n(IV))^ + T^. (7) 

Here, Cf is the speed of light in the optical fiber and T is the 
minimum latency between two attempts, which is expected 
to be dominated by the time required for cooling and optical 
pumping of the atom. 

To be quantitative, we take p^ as calculated in Sec. IIB 
for a control pulse with 5.9 ns FWHM, which combines 
high efficiency with high indistinguishability as estimated in 
Sec. Ill A. Correcting this value for the slightly reduced cou¬ 
pling of atoms not in the center of the herald cavity yields 
Pht = 0.53 (see Appendix A), which is the value we use 
throughout this section. L a = 22 km and Cf = 2 • 10 5 km/s are 
typical parameters for commercial telecom optical fibers. We 
assume detectors with an efficiency of r/ t = rjh = 0.8 which 
is within range of current technology [47]. The reflectivity of 
the cavity is R = 0.61 for the considered heralding cavity (Ap¬ 
pendix A). Single atoms trapped in optical cavities have been 
shown to be highly efficient single-photon sources [48], and 
with state-of-the-art cavity parameters they could certainly 
achieve an efficiency of p v = 0.8, which is the value we as¬ 
sume for the single photon source used in the atomic BSM. 



FIG. 6. Average storage time required for the nodes which have to 
retain entanglement the longest to entangle two end points separated 
by the total distance L. The coherence time of the nodes needs to 
greatly exceed this time to prevent degradation of the entanglement. 
The line styles are the same as in Fig. 5. Repeaters with more nodes 
show a better scaling of the required storage time with distance, but 
have larger overhead. With four links, restarting from the beginning 
significantly relaxes the required storage time. 


We further consider a conservative cycle time of T = lOOps. 
This would result in a repetition rate of 10 kHz over very short 
distances. For larger separations, the finite Cf and the resulting 
communication time have to be accounted for, which reduces 
the repetition rate. For example, at Lo = 80 km the repetition 
rate drops to 2 kHz, dominated by the communication time. 

Using the above-mentioned parameters, we calculate the 
rate 1 / (T) for the generation of remote heralded entangled 
pairs, without repeater (N = 1), for the most basic repeater 
(N = 2), and for the extension to the second swap level 
(N = 4). This entangled-pair rate is plotted as a function of 
the total length of the repeater link in Fig. 5. For N = 4 we 
also compare the two different entanglement swapping strate¬ 
gies explained above. At short distances, direct entanglement 
is superior because of the reduced overhead compared to the 
repeater protocol. The break-even with one repeater node is 
reached after 41km, and after 100 km, the repeater-assisted 
entanglement generation is approximately 4 times faster. A 
system with three repeater nodes with restart from the be¬ 
ginning outperforms the single-repeater-node system beyond 
150 km and is 14 times faster than direct entanglement at this 
distance. By keeping entangled pairs, another factor of ap¬ 
proximately 2.4 can be gained and the break-even with the 
single-repeater-node system is already reached at 82 km sepa¬ 
ration. 


B. Required storage time 

To prevent significant degradation of the entanglement, the 
coherence time of the employed quantum memories has to be 
much longer than the time the atomic state has to be stored. 





9 


We calculate the average time interval between the first suc¬ 
cessful creation of entanglement and success of the protocol, 
which is the time the entanglement has to be stored (Fig. 6 
and Appendix C). More repeater nodes result in better scal¬ 
ing with distance but have a larger overhead. Keeping unaf¬ 
fected entangled pairs after a failed entanglement-swapping 
attempt requires 2.4 times longer storage times. At distance 
L = 100 km (L = 200 km) the single-repeater-node protocol 
requires a storage time of 59 ms (980 ms). Using three re¬ 
peater nodes this value drops to 53 ms (260 ms). By restarting 
the protocol from the beginning, once an entanglement swap¬ 
ping attempt fails, the required storage time for three repeater 
nodes can be further reduced to 22 ms (110 ms). Aborting 
long-running attempts can thus be used to extend the max¬ 
imum distance of a repeater system under the constraint of 
a limited coherence time, however at the cost of a constant 
factor in the entangled-pair rate. If memory time is a strong 
limitation, it can make sense to add more repeater nodes than 
Fig. 5 suggests to be optimal. Coherence times of several sec¬ 
onds have been demonstrated for the suggested qubit imple¬ 
mentation in 87 Rb and could be further improved by reducing 
magnetic field fluctuations [13, 39]. The degradation of the 
fidelity of the entangled pairs will, however, be a relevant lim¬ 
itation for the fidelity of the final state and therefore poses a 
challenge for any experimental implementations. 


C. Secret-key rate 

An especially important application of a quantum repeater 
is quantum key distribution (QKD). Device-independent QKD 
is enabled by heralded entanglement between remote nodes. 
The raw key extracted from an imperfect entangled state can 
be converted into an unconditionally secret key by classical 
post-processing. In the limit of infinitely long keys, the secret- 
key rate can be obtained by multiplying the entangled pair 
rate with the secret fraction of the final state [49] . The latter 
can be calculated from the indistinguishability of the telecom 
photons characterized by their interference contrast and the fi¬ 
delity of an entangled state produced by the atomic BSM with 
perfect input states (see Appendix D). We assume that the co¬ 
herence time of the memories is so long that we can neglect 
degradation due to decoherence. For an interference contrast 
of C = 0.97, the BSM fidelity needs to be 95 % (89 %) to yield 
a secret fraction of 0.5 (0.25). As long as the fidelity is above 
83 %, a secret key can be extracted. The secret fraction de¬ 
creases if additional elementary links are inserted. With four 
elementary links and C = 0.97 interference contrast, the BSM 
fidelity needs to be 99 % (97 %) to retain a secret fraction of 
0.5 (0.25). In this case, the fidelity needs to be above 95 % for 
a non-zero secret fraction. 


D. Entanglement purification 

Imperfections in the sub-steps required for the operation of 
a quantum repeater lead to an error in the final state that scales 
exponentially with the number of nodes. This can be over¬ 


come via entanglement purification [5], which uses multiple 
states that are not maximally entangled to generate a single 
entangled state with higher fidelity. The purification protocol 
described by Deutsch et al. [50] could be implemented in the 
repeater architecture proposed here by employing the single¬ 
qubit rotations, the atom-atom gate mechanism, and atomic 
state detection procedures proposed for entanglement swap¬ 
ping (see Sec. IV). The quantum gates between two atoms in 
the same herald cavity would be complemented by a remote 
gate between two atoms in spatially separated herald cavities, 
also mediated by the reflection of a single photon [43], thereby 
enabling multiple rounds of entanglement purification using 
several instances of the proposed repeater node. 

Entanglement purification can only increase the fidelity of 
the final state if the errors introduced by the required oper¬ 
ations are significantly smaller than the errors present in the 
initial states. If entanglement purification and entanglement 
swapping build on the same gate mechanism, they will suffer 
from similar imperfections. For the very few entanglement 
swapping gates necessary for two and four elementary links, 
entanglement purification can therefore only lead to an in¬ 
crease in fidelity if considerable errors are introduced by other 
parts of the repeater protocol. An important source of error is 
loss of interference contrast C in the entanglement distribu¬ 
tion process, caused by either the generation of partially dis¬ 
tinguishable photons or errors introduced during fiber trans¬ 
mission. Taking an interference contrast of C = 0.97 (see Sec. 
Ill A) as an example and applying the error models described 
in Appendix D, we find that the entanglement purification pro¬ 
tocol described by Deutsch et al. [50] increases the fidelity of 
the final state only if the atom-atom gate error is less than 4 % 
for two elementary links (N = 2) and less than 7 % for four 
elementary links (N = 4). 

In the case of perfect gates, any target fidelity below unity 
can in principle be reached. This comes, however, at the cost 
of a significant additional overhead, because more quantum 
memories are required, and the final entangled pairs are pro¬ 
duced at a lower rate. For applications in quantum key distri¬ 
bution, the secret-key rate is a convenient measure that allows 
comparing repeater strategies with and without entanglement 
purification. Employing the methods described in Appendix 
D, we calculate that even with perfect gate operations, i.e., 
efficiency and fidelity of unity, entanglement purification is 
beneficial only if the interference contrast is very low, namely 
C < 0.55 in case of N = 2 and C < 0.83 in case of N = 4. This 
has to be compared to our expected interference contrast of 
C = 0.97 (see Sec. Ill A) and the fact that high-fidelity trans¬ 
port of polarization qubits in optical fibers over the distances 
considered here is possible [6]. 

We therefore conclude that for a realistic repeater imple¬ 
mentation over a few hundred kilometers, entanglement pu¬ 
rification is unlikely to be beneficial and the best strategy is to 
focus on high-fidelity implementations without entanglement 
purification [51, 52]. 
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VI. CONCLUSION 

Past experiments with single atoms in optical cavities have 
underlined their excellent prospects for applications in quan¬ 
tum communication [14, 16, 33]. The distances that can be 
bridged by direct photon transmission at near-infrared or vis¬ 
ible wavelengths is, however, limited. We have shown how 
this limit could be overcome by employing, first, operation 
at telecom wavelength and, second, a realistic, efficient, and 
highly-integrated quantum-repeater concept. 

Operation at telecom wavelength is essential for long¬ 
distance fiber-optic communication without the need for 
wavelength conversion. Our simulations show that creation of 
entanglement between single atoms and telecom-wavelength 
photons with an efficiency of 0.57 is possible with 87 Rb atoms 
and current cavity technology. The designated S-band tran¬ 
sition enables integration into existing fiber-optic networks. 
Remote entanglement can be established by a photonic BSM 
with a state fidelity of 99 %, because the generated photons are 
highly indistinguishable. Very efficient entanglement swap¬ 
ping can be achieved by a two-atom quantum gate employing 
the heralding cavity. Thus entanglement generation, quantum 
memories and entanglement swapping can be realized with 
single atoms in optical cavities, and all additional components 
necessary to complete a simple quantum repeater are commer¬ 
cially available. The highly efficient, yet heralded operations 
enable the generation of remote entanglement 4 times faster 
than direct transmission at a distance of 100 km. This sim¬ 
ple quantum repeater can be extended by inserting two more 
nodes, providing a speedup of 82 over 200 km distance, com¬ 
pared to a system without repeater. The proposed scheme 
does not rely on assumptions about future technology and thus 
provides a clear and realistic path toward the experimental 
demonstration of such a quantum repeater. 
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APPENDIX 

Appendix A: Parameters used for the simulations 

We assume a heralding cavity of 400 pm length. This leaves 
enough space to put two fiber-based entangling cavities, later¬ 
ally separated by 200 pm, between the mirrors, with the fibers 
having a diameter of 125 pm. Identical radii of curvature of 
500 pm for the two mirrors of the heralding cavity result in a 
mode waist of 7.9 pm at a wavelength of 795 nm. Using these 
parameters, the decay rate of In x 5.75 MHz for the rubidium 
Di line and the relative transition strength of 1/4 for the decay 
from 5 2 P 1/2 \F' = l;m F = ±1) to 5 2 S 1 / 2 \F = 2\mp = ±1), 
we calculate an atom-cavity coupling strength of g^ = 2 k x 
16.3 MHz. To implement the scheme with high efficiency, 


we require mirrors of different transmission: one high reflec¬ 
tor and one mirror with higher transmission (called the output 
coupler) that is the dominant loss channel of the cavity. For 
the high reflector, we assume a transmission of 10 ppm and 
our tests with laser-machined substrates indicate that 20 ppm 
parasitic losses per mirror can be achieved for the proposed 
cavity geometry. In total, this adds up to 50 ppm losses and 
a corresponding field decay rate of = 2k x 1.5 MHz. As 
a compromise between the directionality of the cavity decay 
and high cooperativity, we choose a transmission of 400 ppm 
for the output coupler, which results in k£ c = 2 kx 11.9 MHz. 

An entangling-cavity length of 75 pm ensures a small mode 
volume, but also avoids any significant clipping losses of the 
heralding mode, because even accounting for the curvature of 
the mirrors, there is still 65 pm of space between them. We 
choose asymmetric radii of curvature of 100 pm for the high 
reflector and 200 pm for the output coupler resulting in a mode 
waist of 4.8 pm at A t = 1476 nm. This optimizes the trans¬ 
verse overlap [23, 53] between the cavity mode at the output 
coupler and the mode of a telecom single-mode fiber (10 pm 
mode-field diameter) to 0.96. Due to the asymmetric radii of 
curvature, the mode radius at the position of an atom trapped 
in the center of the cavity is 5.3 pm. The decay rate of the 
4 2 D 3 / 2 state to the 5 2 P 1 / 2 state ( 5 2 F 3 / 2 state) is 2k x 1.62 MHz 
(2k x 0.30MHz) [54] and decay from | F" = l;mf = 0) ends 
up in \F' = 1; mp = ± 1) with 5/12 probability each. The cou¬ 
pling rate of an atom at the center of the described cavity at 
this transition is thus gt = 2K x 70 MHz. We expect dielectric 
coatings at telecom wavelengths to have similar performance 
as coatings for the near-infrared, and thus assume 20 ppm par¬ 
asitic losses per mirror for the entangling cavity as well. In 
combination with 10 ppm transmission for the high reflector, 
this results in k\ = 2kx8 MHz. We set the transmission of the 
output coupler to 600 ppm, resulting in K* t oc = 2k x 95 MHz. 

We assume degenerate polarization eigenmodes for the en¬ 
tangling cavity and consider a heralding cavity that only sup¬ 
ports a ^-polarized mode, which could effectively be realized 
by inducing a large frequency splitting between the polariza¬ 
tion eigenmodes of the heralding cavity [26]. 

For two atoms in one heralding cavity, as required for a full 
quantum repeater node (Fig. 1), the two atoms cannot both be 
positioned exactly at the center of the heralding cavity. We 
propose to place the atoms on the axis of the heralding cav¬ 
ity, ±100 pm from the center. This leaves enough space for 
the entangling cavities and results in a small reduction of the 
coupling to the heralding cavity to g^ = 2k x 15.1 MHz. This 
results in only a slight reduction of 1 % of the total success 
probability, which we nevertheless account for in the calcula¬ 
tions of the quantum-repeater performance in Sec. V. 

All parameters mentioned above are consistent with results 
of ongoing work with optical fiber cavities in our laboratory 
[26]. 


Appendix B: State-dependant probability for herald generation 

To see the effect of degenerate polarization eigenmodes, we 
start with the intermediate entangled state l^i) in the linear 
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polarization basis for the telecom photon (cf. Eq. (3)) 

l ' I ' l) = 7l (l ' I ' 1 ’ H> + l ' I ' 1 ’ v)) (B1) 

with 

|'P 1) v) = -h|y),(|-l) i + |+l> i ). (B 2 ) 

Here, we have assumed G = n for clarity. In case of 6 = 0 the 
calculation is analogous with similar results. 

We assume the polarization eigenmodes of the herald cav¬ 
ity to be 7T-polarized and V-polarized. H-polarization is then 
parallel to the herald cavity axis and would require a longi¬ 
tudinal field which is not supported by the herald cavity. In 
the worst case, the polarization eigenmodes n and V are ex¬ 
actly degenerate, such that the herald cavity enhances decay to 
states with the same hyperfine quantum number by the same 
factor. In that case, the final state after emission of a pho¬ 
ton into the herald cavity is determined just by the amplitudes 
of the transitions involved. We assume that free-space decay 
can be neglected, which is the worst case, because free-space 
decay is isotropic and cannot lead to a state-dependent prob¬ 
ability for herald generation. Under these assumptions, the 
state | v E / i,h) decays to 


1^3,h) = 


X 

+ 

+ 


! 2 2 2 I H) t 

+ H 2 + |y|2 + j£ M 

j *)k (b\-l) f ~l/\+l) f ) 

I V)h ( c I m F = -2) +c'\m F = +2)) 
3= \V) h (a + a')\m F =0)], 


(B3) 


where \mp = 0) and \mp = ±2) have the same hyperfine 
quantum number as |±l)y. a, b, and c are the transition am¬ 
plitudes from | —1)- to \mp = 0), | —1 )y, and \mp = —2), re¬ 
spectively, and a! ,b', and c' are the transition amplitudes from 
|+1)- to |mp = 0), | + 1) f, and \mp = +2) (cf. Fig. 2). Simi¬ 
larly, the state | x Ei ) v) decays to 


1^3,V> = 


\V), 


\/ + \b\ 2 + \bf + 

x \ n )h (^l _ l)/ + ^ , |+l)/) 

+ ^ \V)h ( c I m F = -2) - c' | m F = +2)) 

+ 7 I \ v )h( a - a ')\ m F = °)]- 


(B4) 


For symmetry reasons, a! = ±a, b r = ±b and c' = ±c and 
the basis states are chosen in such a way that all transition am¬ 
plitudes are real. Therefore, either a + a! = 0 and I'F^h) does 


not decay to |trip = 0), or a — a! = 0 and |T / i ? v) does not de¬ 
cay to |nip = 0), because of destructive interference. In either 
case, the probability to emit a ^-polarized photon is different 
for these two states, because the normalization factor is dif¬ 
ferent. Therefore, selection on events in which a 7T-polarized 
photon was detected does not yield a state with equal ampli¬ 
tudes, which would be required for a maximally entangled 
state. Instead, a state with less entanglement is created, de¬ 
pending on the value of \a\ compared to \b\ and \c\. 

To calculate the fidelity of this state, we set a' = a, b' = b 
and c' = c for simplicity. All other cases are analogous. If a 
^-polarized photon is detected, the normalized final state l^) 
is 


PPa) 


= ^+(^(|'P 3 ,h> + |'I'3,v» 

= [+PTc2 \H) t (b 1 )/ - I + 1 )/) 

+ V2^+2P+?\V) t (\-l) f + \+l ) f J 


, (B5) 


with the normalization constants JY and JV = 
4 {a 2 + 2b 2 + c 2 ). If a ^ 0, this is not a maximally en¬ 
tangled state. Its fidelity with the ideal final state l^) 
(0 = it) is 


F = 1^21^3 ) I 2 


1 1 (2a 2 + lb 2 + c 2 ) ( 2b 2 + c 2 ) 

2 + 2 a 2 + 2P + c 2 ‘ 

(B6) 


For the transition from 5 2 P\/2 \F f = 1) to 5 2 Si/ 2 \F = 2) 
in 87 Rb the relative transition amplitudes are a = a! = — 1, 
b = b' = y/3, and c = c' = — y/6, which results in a slight fi¬ 
delity reduction of 1 — F = 0.15%, even if the polarization 
eigenmodes of the herald cavity are degenerate. However, 
for different transitions with a larger a relative to b and c, 
the effect can be much worse. E.g., for the transition from 
5 2 P\/2 | F' = 1) to 5 2 Si/ 2 |F = 1) in 87 Rb, the transition ampli¬ 
tudes are a = —a' = — 1 , b = —b' = 1 , and c = c' = 0, which 
reduces the fidelity byl — F = 2.9%. As the relative transi¬ 
tion amplitudes depend just on the coupling of electron angu¬ 
lar momentum, electron spin, and nuclear spin, the effect is 
the same across different atomic species with the same values 
for these properties. 


Appendix C: Required storage times 

To estimate the required coherence time of the memories, 
we study the protocol in more detail. We calculate the time 
between the first successful creation of entanglement that is 
still used at the end of the protocol, i.e., is not discarded due 
to a failed entanglement-swapping attempt, and the end of 
the protocol. We neglect the possibility of two pairs becom¬ 
ing entangled during the same cycle, which is justified if the 
entanglement probability p Q is small. We assume a simple, 
synchronous temporal operation of the the protocol such that 
the time interval between two attempts has a fixed length of 
Lo/cf + T. We assume all memories to decohere equally and it 
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is therefore irrelevant whether the entanglement is transferred 
to another memory via entanglement swapping. 

We first study the protocol that is restarted from the be¬ 
ginning whenever an entanglement-swapping attempt fails. In 
this case, the expected number (m) of cycles the entanglement 
has to be stored is simply the expected number of attempts re¬ 
quired to entangle N —l pairs plus one to account for the trial 
it takes to entangle the memory itself: 


(m) =Z N _i Oe) + l- (Cl) 

If the entanglement is kept in case of a failed, unrelated 
entanglement-swapping attempt, the explicit probability dis¬ 
tribution for succeeding in a particular trial is difficult to write 
down. However, we can extract the maximum number of tri¬ 
als a memory has to store entanglement using the Monte Carlo 
simulation as in the calculation of the entangled-pair rate. We 
take (m) to be the average over 10 6 runs. Using a bootstrap 
on the values gathered from these runs, we estimate the 95 % 
confidence interval to be smaller than ±0.2% for all values. 


Appendix D: Secret fraction 

To calculate the unconditional secret fraction of a key, 
which has been generated by a quantum-key-distribution pro¬ 
tocol, the density matrix of the imperfect final state has to 
be known. We assume perfect input states and start with the 
entangled state after a photonic BSM with contrast C. The 
latter is the probability that the photons interfere and produce 
the correct entangled state. If they do not interfere, the re¬ 
sult of the measurement is a classically correlated state. If the 
result of the photonic BSM indicates e.g., an entangled state 
|T /+ ) = (| 10) ± 101))/ y/2 between two atoms, the density ma¬ 
trix for the resulting mixed state is 

Pl = C\V + ) CF+I + I (1 -C) (| 10) (10| + |01) (01|). (Dl) 

We neglect degradation of the entangled state due to deco¬ 
herence of the atom. If this is not given in an experimental 
implementation, calculation of its detrimental effect on the 
secret fraction requires detailed knowledge of the decoher¬ 
ence mechanisms. Entanglement swapping using an atomic 
BSM can be performed by applying a CNOT gate followed 
by a Hadamard gate, measuring the two atoms and performing 
single-qubit state rotations at the remote target atoms depend¬ 
ing on the result of that measurement. For perfect input states, 
this procedure is assumed to produce the maximally mixed 
state pf 4 = 1/4 with probability (1 — P), such that the fidelity 
of the entangled state is given by (1 ± 3P)/4. Applying this 


procedure to a tensor product of pi and the same entangled 
state between two different atoms, yields the density matrix 
after entanglement swapping 

p 2 = PC 1 2 * |»P + ) (¥+1 + 1(1 -P)l 
+ PC(1-C)(|10)(10| + |01)(01|) 

+ 1(1 -C) 2 P(|10) <10| + |01) (01|). (D2) 

Using the identity 110) (10| + |01) (011 = |'P+)('P+| + 
|vp-) p 2 can b e rewritten in the Bell-state basis 

p 2 = /li |'f'+}('f'+|+A 2 |'f'-)('f'-| 

+ A 3 |<J> + )(<J> + | + A 4 |<1> _ ) (<S>“ I (D3) 

with 

A 1 = 1(1+P + 2PC 2 ) A 3 = 1(1-P) 

A 2 = 1(1+P-2PC 2 ) A4 = l(l-P). (D4) 

Following the calculation described in Ref. [49], we calcu¬ 
late the secret fraction for entanglement-based quantum key 
distribution. The error rates £ x , e y , £ z for the three bases are 

£^ = A 2 + A 4 =l(l-PC 2 ), 

£) , = a 2 +a 3 = 1 (i-pc 2 ), 

£ z = A 3 + A 4 =1(1- j P), (D5) 

and the unconditional secret key fraction is 


r = 1 — h(Q) — e z h 


1 + ( £ x ~ %) /$ 


-(1 ~e z )h 


1 — (£j: +£y + £ z ) /2\ 

) 


(D6) 


with the quantum bit error rate Q = e z and the binary entropy 
Kp) = -plog 2 (p) - (1 -p)log 2 (l -p). 

The error rates for the next swap level, i.e four elementary 
links, can be calculated by using p 2 instead of pi as the initial 
state and applying the same procedure: 

e f-» = i(l-P’C<), 

e (»- 4, = l( 1 - f!c 4) > 

c f- 4 > = l(l-P J )= e (»->, (D7) 
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